General

  • Target

    fdcfa93ccd168a11b0b2a8807870112efff6119d114b40fbd3843ea520cf262b

  • Size

    276KB

  • Sample

    231010-y3cg4sgh71

  • MD5

    8478353eea4ec0f9c17095bed9756786

  • SHA1

    a4b498f13dc2f3bd7a4df11fad36745d56c595c5

  • SHA256

    fdcfa93ccd168a11b0b2a8807870112efff6119d114b40fbd3843ea520cf262b

  • SHA512

    3a2c7cbc017920339af30fa0801360927d124d6174c69216e64dd856bcd38adc979dab5d15356c7bf29472585a371e8622a02226d83fb671b755f17eadfc5a7b

  • SSDEEP

    6144:Whn2KajWpVP06Yj++WIDsSH3bz6fpEKWLk82jD6Qrj:WUKajWu++WIDb3b2fUkLyuj

Score
10/10

Malware Config

Extracted

Family

mystic

C2

http://5.42.92.211/loghub/master

Targets

    • Target

      fdcfa93ccd168a11b0b2a8807870112efff6119d114b40fbd3843ea520cf262b

    • Size

      276KB

    • MD5

      8478353eea4ec0f9c17095bed9756786

    • SHA1

      a4b498f13dc2f3bd7a4df11fad36745d56c595c5

    • SHA256

      fdcfa93ccd168a11b0b2a8807870112efff6119d114b40fbd3843ea520cf262b

    • SHA512

      3a2c7cbc017920339af30fa0801360927d124d6174c69216e64dd856bcd38adc979dab5d15356c7bf29472585a371e8622a02226d83fb671b755f17eadfc5a7b

    • SSDEEP

      6144:Whn2KajWpVP06Yj++WIDsSH3bz6fpEKWLk82jD6Qrj:WUKajWu++WIDb3b2fUkLyuj

    Score
    10/10
    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks